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ie COPYRIGHT (c) 1978, 1980, 1982, 1984 BY 
is DIGITAL EQUIPMENT CORPORATION, MAYNARD, MASSACHUSETTS. 
ie ALL RIGHTS RESERVED. 
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' 4 
'® THIS SOFTWARE IS FURNISHED UNDER A LICENSE AND MAY BE USED AND COPIED * 
'® ONLY IN ACCORDANCE WITH THE TERMS SUCH LICENSE AND WITH THE * 
'® INCLUSION OF THE ABOVE COPYRIGHT NOTICE. THIS SOFTWARE OR ANY OTHER * 
t® COPIES THEREOF MAY NOT BE PROVIDED OR OTHERWISE MADE AVAILABLE TO ANY * 
'® OTHER PERSON. NO TITLE TO AND OWNERSHIP OF THE SOFTWARE IS HEREBY * 
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i THE INFORMATION IN THIS SOFTWARE IS SUBJECT TO CHANGE WITHOUT NOTICE 
+. oeepokat ion NOT BE CONSTRUED AS A COMMITMENT BY DIGITAL EQUIPMENT 
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144 
i] 
FACILITY: FI1ACP Structure Level 2 
3 ABSTRACT: 
7 037 i This module contains the routines that perform the Data Security 
3 O38 Erase (DSE) on a portion of a disk volume. 
40 040 ! ENVIRONMENT : 
4 ek i STARLET operating system, including privileged system services 
rb Rez and internal exec routines. 
45 045 1 i-- 
46 pe8 : 
47 04 : 
$8 Bes : AUTHOR: Steven T. Jeffreys, CREATION DATE: 23-Mar-1983 
30 050 : MODIFIED BY: 
4 03¢ i v03-007 cD$0004 Christian D. Saether 20-Jun-1984 
5 05 : aise the process diocnt around the call to $qio so 
54 bee ! it will not fail for lack of quota. Also raise ASTCNT 
2? B22 } so it will not fail for that reason. 
Ad 0087 i V03-006 ACG0408 Andrew C. Goldstein, 23-Mar-1984 14:44 
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Add AST parameter so that impure storage is fully based 


v03-005 CDS0003 Christian D. Saether 30-Dec-1983 
Use L_NORM Linkage ond BIND_COMMON macro. 


v03-004 CDS0002 Christian D. Saether 27-Sep-1983 
Enhance privileges for erase. 


V03-003 STJ3104 Steven T. Jeffreys, 03-Jun-1983 
- Removed reference” to VMSD2. 


v03-002 CDS0001 Christian D. Saether 12-May-1983 
Make erase qio asychronous. 


v03-001 STJ3082 Steven T. Jeffre 30-Mar-1983 
= Added CHANNEL parameter to ERA E “BLOCKS and DO_ERASE. 
This makes for a cleaner interface with callers outside 
of the Files-11 ACP. (eg. REBUILD and ANALYZE/D ISK) 
- Use VMSD2 to enable/disable erase. (Temporary) 
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LIBRARY ‘SYSSLIBRARY:LIB.L32'; 
REQUIRE ‘SRC$:FCPDEF. B32'; 
' 
' 
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FORWARD ROUTINE 
ERASE _ BLOCKS : L_NORM, ! Top level DSE routine 
ERASE : LINORM; ! Issues the erase $010 
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GLOBAL ROUTINE ERASE_BLOCKS (START_LBN, BLOCK_COUNT, CHANNEL) : L_AIORM = 


32 V4.0-74 p 
RCCHTIX.REDERASE.832;1° 9%" (23 


nw" 
me 


Perform a data prewr sty oreye (DSE) on a single contiguous extent 


on the disk. This routine is recursive. 


1 
is 
i FUNCTIONAL DESCRIPTION: 
The DSE is done by calling the erase pattern geneceter syeyen service, 
SERAPAT, and writing the pattern returned to the disk. This is repeated 
until SERAPAT returns a status of SS$_NOTRAN, which indicates that the 
DSE is complete. 
The SERAPAT code is loadable, and may vary from site to site. 
However, the default SERAPAT code is very simple, and by checking to see 
if the default SERAPAT code is still being used, we ony save the 
overhead of calling SERAPAT. If the flag SGNSV_LOADERAPAT in the cell 
SGNSGL_LOADFLAGS is set, it indicates that an alternate SERAPAT has been 
seeded. ae we should call the SERAPAT routine instead of taking 

e shortcut. 


Note that the flag SGNSV_LOADERAPAT corresponds to the SYSGEN parameter 
LOADERAPAT. Since the SYSGEN parameter may be shengee on the running 
systen it implies that until the system is rebooted, it is possible 
that the site-specific SERAPAT will not be called, and the default 
erase pattern (0), will be used in its place. We do not believe this 
to be a significant security risk. 


for disks, and the erase pattern is 0. 


This routine assumes that 1/0 transfers of an arbitrary length can be 
done to any disk device with but a single Q10. 


CALLING SEQUENCE: 
ERASE_BLOCKS (ARG1, ARG2, ARG3) 


INPUT PARAMETERS: 
ARG1: LBN of first block to be erased 
ARG2: number of blocks to erase 

ARGS: 1/0 channel to the device 


IMPLICIT INPUTS: 
CURRENT_VCB: VCB of volume 
CURRENT_UCB: UCB of volume 


OUTPUT PARAMETERS: 

None. 
IMPLICIT OUTPUTS: 

LOC_LBN: plcement LBN of allocation or 0 
ROUTING VALUE: 


if successful erase | 
<a system status code> if an error was encountered. 


Note that the default SERAPAT code defines a one-step DSE procedure 
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ERASE_STATUS = .STATUS; 
WHILE™ .STATUS AND (.STATUS NEQ SS$_NOTRAN) DO 


VEWwn— 


Write the erase pattern to the disk and call SERAPAT 


Each time we call SERAPAT, increment the 


to generate the next data security erase pattern. 
FRASE Pass. 


When SERAPAT returns SS$_NOTRAN, the DSE is complete. 
Note that if the last attempt to erase the data succeeds, 
we assume that the operation was a success. 


i 
i 
i 
i 
i 
i 
‘ 
ERASE_STATUS = DO_ERASE (.START_LBN, .BLOCK_COUNT, .ERASE_PATTERN, .CHANNEL); 
ERASE-PASS = .ERASE P 413 

STATUS = SERAPAT (TYPE=ERASK_DiSK, COUNT=.ERASE_PASS, PATADR=ERASE_PATTERN) ; 


wn — 
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: 148 1137 1! ’ 
3; 149 1138 1 ! SIDE EFFECTS: : 
: 150 1139 1! None. : 
; «6151 1140 1! ; 
. 3 § 1141 1 !e- : 
: 32 1128 2 BEGIN 1s f ERASE_BLOCKS 
: !' Start o LOCK : 
s 55 1144 : 
3 138 1145 EXTERNAL : 
.. 1338 SGNSGL_LOADFLAGS: BITVECTOR ADDRESSING_MODE (GENERAL); . 
; 128 Vee ! System flags bitvector : 
: 160 1149 EXTERNAL LITERAL ° 
3 19) 1131 SGNSV_LOADERAPAT; ! System flag ; 
3 188 11 ¢ BASE _REGISTER; ‘ 
3: «164 115 : 
: 165 1154 LOCAL ; 
; 166 1155 ERASE_PASS : LONG, ' Count of erase passes a 
; 167 1156 ERASE_PATTERN  : LONG, ! Pattern to write to the disk : 
; 168 1157 ERASE_STATUS : LONG, ! Intermediate status ; 
3; 169 1158 STATUS : LONG; ! Store status of operation : 
; 170 1159 : 
s 77 1160 ! . 
: \7¢ 1193 Determine if default SERAPAT routine is present. ‘ 
: 174 1188 IF NOT .SGNSGL_LOADFLAGS CSGNS$V_LOADERAPAT) : 
: «175 1164 THEN : 
s 176 1165 BEGIN . 
. tre 1166 ; ! > 
; 178 1167 ! The default SERAPAT is present. That implies that the : 
3 4 Be 3 ! DSE is a one-pass operation that zeroes each block. : 
; «6181 1170 STATUS = SS$_NOTRAN; : 
; 182 1171 ERASE_STATUS = DO_ERASE (.START_LBN, .BLOCK_COUNT, 0, .CHANNEL); F 
: 183 106 END : 
> «(184 117 ELSE : 
; «6185 1174 BEGIN : 
: «186 1175 ! ; 
: 187 1176 ! A site-specific SERAPAT has been loaded. : 
: 188 1177 } : 
: 189 1178 ERASE_PASS = 1; : 
3 Hb 4 STATUS = SERAPAT (TYPE=ERASK_DISK, COUNT=.ERASE_PASS, PATADR=ERASE_PATTERN) ; : 
i 1 gt § : 
. 1188 4 : 
: 19 1184 4 3 
: 196 1185 4 : 
: 197 11 4 § 
; 198 11 4 3 
3: 199 1188 4 : 
; 200 By 4 : 
: 20 11 4 3 
: 20 1191 4 : 
; a 1192 4 3 
3: 204 1195 4 ; 


Woo 
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3 05 1194 END; 
3 3 1195 END; 
; 20 1338 ! 
: 208 119 ' Return the most atgnttigent status value. At this peter. ERASE. STATUS 
; 209 1198 ' is the status of t rite to disk, and STATUS is the Last of the Last 
; 210 1199 ' call to SERAPAT. If the write had an error, return that status, other 
> 211 1 90 i wise ore the a of the Last call to $ERAPAT cantch should be 
3 1g : ba SS$_NOTRAN). 
3 14 1 8 if NOT «ERASE _ STATUS 
: $2 1508 ERASE_STATUS 
: i$ 1 82 ELSE A 
3 18 1207 STATUS 
3; 219 1208 
: 220 1209 1 END; ! End of ERASE_BLOCKS 
-TITLE ERASE 
IDENT \V04=-000\ 
~EXTRN SGNS$GL_LOADFLAGS 
-EXTRN SGN$V_COADERAPAT 
eEXTRN SYSSERAPAT 
-PSECT S$CODES,NOWRT,2 
003c 00000 ENTRY ERASE rt a Save R2,R3,R4,R5 : 1080 
55 000000006 00 9€E 00002 i ty SYSSERAPAT RS 3 
5E 04 C2 00009 SUBL #4, SP : 
18 000000006 00 00000000G 8F 3 0000C BBS PSENSV. LOADERAPAT. SGNSGL_LOADFLAGS, 1$ 3: 1163 
54 0629 ~=s«BFF C 00018 MOVZWL A TUS : 1170 
0c ac dD 0001p PUSHL Ne : 1171 
7E be 0020 CLRL ; 
7E 04 AC D 00022 MOVQ START LBN, -(SP) $ 
0000v CF 04 4 Bee 6 CALLS +¥ DO_E 3 
53 50 D 0028 MOVL , ERASE STATUS é 
40 11 0002E BRB 3: 1163 
52 4 DO 00030 1$: MOVL #1, ERASE_PASS : 1178 
4004 F BB 000 3 PUSHR #°M<R2,SP5 3 1179 
b¢ DD 000 PUSHL 3 
65 0 fe 0039 CALLS ° LE staal é 
54 50 b0 0003C MOVL RO STATUS i 
53 4 44 8 f MOVL STATUS, GRASE. STATUS ; 1180 
2B 4 € tg 23: BLBC : 1181 
00000629 = BF 4 D1 0004 CMPL STATUS; #1577 3 
22 13 0004C BEQL $ 3 
0C AC ODD Onee PUSHL HANNEL 3 1191 
04 AE bb 005 PUSHL ERASE _PATTERN 3 
7E 04 AC D 00054 Ova ART_LBN, -(SP) : 
0000v CF 4 F 08 CALLS #4, DO_ERASE : 
53 8 1) D MOVL RO, ERASE_STATUS : 
D6 0006 INCL ERASE PASS ; 1193 
4004 F BB 6 PUSHR #*M<R2,S 3 19 
¢ dD 6 PUSHL ° 5 
$? F 6 CALLS eal 3 
4 50 pO 00068 MOVL RO. STATUS ; | 
| 


; Routine Size: 


123 bytes, 


Routine Base: 


Sh 


SCODES + 0000 


oe 


eee 


ep- 
ep- 


1986 93:40:88 


8 2$ 
BLBS ERASE_STATUS, 4$ 
cere ERASE_STATUS, RO 


MCVL STATUS, RO 


er bet Blis 
DISKSVMSMAS 


ct 
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ROUTINE DO_ERASE (START_LBN, BLOCK_COUNT, ERASE_PATTERN, CHANNEL) : L_NORM = 
'e¢ 
FUNCTIONAL DESCRIPTION: 

Helper routine to ERASE_BLOCKS. Write the erase potters to the disk, 


making sure every block gets written. If a bad block is encountered, 
write around it. 


This routine assumes that 1/0 transfers of an arbitrary length can be 
done to any disk device with but a single Q10. 


Even though the nature of this routine lends itself to a recursive 
implementation, it was done iteratively to minimize stack usage. 


CALLING SEQUENCE: 
DO_ERASE (ARG1, ARG2, ARG3, ARG4) 


INPUT PARAMETERS: 
ARG1: LBN of first block to be erased 
ARG2: number of blocks to erase 
ARGS: 4 byte erase pattern 
ARG4: 1/0 channel to the device 


| 

| 

} 

} 

| 

| 

| 

IMPLICIT INPUTS: | 
None. 
OUTPUT PARAMETERS: | 
None. 

| 


ieteaes OUTPUTS: 


ne. 


ROUTINE VALUE: 
1 if successful erase 
<a system status code> if an error was encountered. 


SIDE EFFECTS: 
The count of erase 1/0 operations is incremented. 
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BEGIN ! Start of DO_ERASE 
EXTERNAL 
CTL$GL_PCB : ADDRESSING_MODE (GENERAL), 
CTLSGL_PHD : ADDRESSING MODE (GENERAL) 
PMS$GL~ERASEIO : LONG ADDRESSING_MODE (GENERAL); 

! Count of erase 1/0 operations | 


BASE _REGISTER; | 


WR 9 ODNAUES WN 0 ODBNAU EWN O ODNAU EWN $C OODNO UE AR OO ONAOUE WN Oo 


EXTERNAL ROUTINE | 
WAI _AST _: L_NORM, 
CONTINUE~ THREAD : L~NORM; 
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vO 

79 

80 LOCAL 

81 : LONG, ' Local copy of START_LBN 

HG COUNT : LONG, ' Local copy of BLOCK_COUNT 
28 BLOCKS_ERASED : LONG ' # of blocks actually erased 
384 TS : BBLOCK (8), i 1/0 status block 

85 ERASE_STATUS : LONG, ' Routine status 
38 STATUS : LONG; ! Store status of operation 
88 
289 


Erase the specified portion of the disk. If the erase fails, rerry 
the operation starting from 1 block past the point of failure. Only 
the status coded from the first such error is returned. 


Set things up for the loop. The loop will terminate when no more 
blocks need to be erased. 


ERASE_STATUS = SS$_NORMAL; ! Assume no errors 
STATUS = SS$_NORMAL; i Ditto 
LBN = .START_LBN; Copy starting LBN 


R 
COUNT = .BLOCK Copy # of blocks to erase 


COUNT; 
WHILE (.COUNT GTR 0) DO 
BEGIN 


Start of erase loop 
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LOCAL 
3 R : REF BBLOCK 
30 SAVE_PRIV : VECTOR C4]; 
PT PCB 
309 PTR CPCB$W_DIOCNT) = .PTR CPCB$W_DIOCNT) + 1; 
310 PTR CPCBSW-ASTCNT] = .PTR CPCBSW-ASTCNT + 1; 
311 SAVE_PRIV [0] = .(PTR CPCB$Q_PRIV]); 
312 SAVE-PRIV C1] = .(PTR CPCBSQ-PRIVI+4); 
1 PBLOCK CPTR PcBSd_PRiV)., PRVSV_LOG_10) = 1; 
314 BBLOCK CPTR CPCBSQ_PRIV], PRVSV_BYPASS) = 1; 
315 OTR = .CTLS$GL_PHD; 
316 SAVE_PRIV ( = . (PIR CPHD$Q_PRIVMSK]); 
317 SAVE~PRIV = .(PTR CPHD$Q"PRIVMSKI+4) ; 
318 LOTK CPTR CPHD$4_PRIVMSK], PRVS$V_LOG 10) = 1; 
yy } BBLOCK CPTR CPHDSQ~PRIVMSK], PRVS$SV_BYPASS) = 1; | 
21 0 ! 
$§ 1 !' Issue an erase $010 to the volume. The IOSM_ERASE modifier turns 
$7 ; } an ordinary write into a special low-overhead write. 
| 
25 p 131 STATUS = $QI0 (CHAN = . CHANNEL 
26 P 131 FUNC = (10$ WRITELBLK OR IOSM_ERASE), | 
27 P 131 OSB = I0STS 
28 P 131 ASTADR = CONTINUE_THREAD, 
<9 P 131 ASTPRM = . 
0 P 131 Pl = ERASE PATTERN 
31 P 131 P2 = (.COURT * 5125, 
3¢ P P3 = .LBN 
da 
335 32 PMS$GL_ERASEIO = .PMSSGL_ERASEIO + 1; ! Bump erase 1/0 counter 
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| 
$ 6 1324 | 
: 7 1325 (PTR Tart eed het ) = ,SAVE_PRIV ae 
: 338 1 : (PTR CPHDSQ-PRIVMSK]+4) = .SAVE_PRIV C3]; 
; 9 1 PTR = .CTLSGL_PCB: 
; 340 1308 PTR FeCBSu _ASTCNT) = .PTR [PCBSW_ASTCNT) = 1; 
; 341 1329 PTR CPCB$W_DIOCNT) = .PTR CPCBSW-DIOCNT) = 1; 
: 4 1330 (PTR erat ori ds = ,SAVE_PRiV LOJ; 
: 43 1 (PTR CPCBSQ~PRIVI+4) = .SAVE_PRIV C1]; 
; 345 1 : IF_.STATUS 
: 346 1334 THEN 
: 347 1335 4 BEGIN 
: 348 1336 4 WAIT_FOR_AST() 
: 349 1337 4 STATOS =~.10STS; 
3; 2 1338 ; END; | 
: $26 1340 : IF .STATUS 
; 35 1341 THEN 
: 354 1 g 4 BEGIN 
3 Soo 1345 4 ; 
s 336 1344 4 ' The call to $010 succeeded. 
3 gor 1345 4 ! Decrement the count of blocks to erase by the number of blocks 
; 338 1346 4 ' actually erased. Advance the starting Lbn to 1 block past the 
: 359 1347 4 ' Last block actually erased. 
: 360 1348 4 ; 
; 361 1349 4 BLOCKS_ERASED = .IJOSTS (2,0,32,0) / 512; 
; 36 1350 4 COUNT = (.COUNT - .BLOCKS ERASED) - 1; | 
3 $7 132) ° LBN = (.LBN + -BLOCKS_ERASED) + 1; 
; 365 1353 4 ! If an error was encountered during the erase, and it is the first | 
; 366 1354 4 ' such error, save the error status code so that if may be returned 
s ser 1355 4 i to the caller. 
; 368 1356 4 ! 
3; 367 1357 5 IF (NOT (STATUS = .JOSTS (0,0,16,0])) 
: 370 1358 4 AND .ERASE_STATUS 
; 37i 1359 4 
3 a6 1360 4 ERASE_STATUS = .STATUS; ! Save first error status 
; of. 1361 4 
: 374 1296 3 ELSE 
3 37S 1363 4 BEGIN 
; 376 1364 4 ; ; 
3 $0 1ee2 ? } The erase $010 failed outright. Terminate the erase operation. 
3 378 1300 4 ERASE_STATUS = .STATUS; ' Save exit status | 
3 $9 1308 3 COUNT = 0; ! Insure loop termination 
; 5¢ 1370 END; ! End of erase loop 
. cee | 
; «385 1378 ; Return the erase status. Only the first error encountered is reported. 
; BS 1375 2 RETURN .ERASE_STATUS 
; 388 1378 
; 4389 137 END; ! End of DO_ERASE | 
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: clessed tees 00:33. 

3; Lines/CPU Min: 2? ee 
3; Lexemes/CPU-Min: 25407 
3 Y Used: 155 pages 
; Compilation Complete 


3 
ERAS 1b-se -1984 00:23: VAX-11 Bliss-32 V4, 
hes 00 1e-8ep-1986 90°4:59 DISKSVMSMASTER:(CF11 
; % OoCe CLRL COUNT 
FF 1 Q000C5 4$ BRw 1$ 
50 DO 000C8 5$ MOVL ERASE_STATUS, RO 
04 000CB RET 
; Routine Size: 204 bytes, Routine Base: S$CODE$ + 0078 
90 1378 #1 
8 91 1379 1 END 
92 1380 0 ELUDOM 
$ PSECT SUMMARY 
: Name Bytes Attributes 
: SCODES 327 NOVEC,NOWRT, RD, EXE,NOSHR, LCL, REL, CON,NOPIC,ALIGN(2) 
; Library Statistics 
: ecoccece Symbols -------- Pages Processing 
; File Total Loaded Percent Mapped Time 
: _$255$DUA28:CSYSLIBILIB.L32;1 18619 32 0 1000 00:02.0 
; COMMAND QUALIFIERS 
: BLISS/CHECK=(FIELD, INITIAL,OPTIMIZE)/LIS=LIS$:ERASE/OBJ=OBJ$:ERASE MSRC$:ERASE/UPDATE=(ENHS$: ERASE) 
; Size:. 327 code + 0 data bytes 
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